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publication or that portion which caused it to be listed; and (iii) all other information or that 
portion which caused it to be listed. 

Except as may be indicated below, all of the patents, publications or other information are 
in the English language, a copy of which is attached hereto and therefore, a concise explanation 
of each reference is not required. The following additional information is provided for the 
Examiner's consideration. 



I hereby certify that this correspondence is being deposited with the United States Postal Service as first 
class mail in an envelope addressed to: Mail Stop RCE, Commissioner for Patents, P.O. Box 1450, 
Alexandria, VA 22313-1450, on August 4, 2005. 
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To assist the Examiner in reviewing this IDS, the Applicants have conducted a key word 
search of each U.S. patent and U.S. patent application publication listed on the attached Form 
PTO-1449. The Applicants used the following search terms in his query of the U.S. patents and 
U.S. patent application publications: (1) "computer$"; (2) "intrusion$", (3) "detect$", (4) 
"(ranking$ or rank or ranked$ or level$)", and (5) "(fusion$ or fuse or group$ or filter$)." The 
Applicants used Boolean logic when performing this search in which each term was linked by the 
logical connector "AND." A search of these U.S. patents and U.S. patent application 
publications using the aforementioned terms and Boolean search logic yielded the following 
results (34 patents and 8 publications): 



U.S. Patents 

U.S. Patent No. 5,278,901 to Shieh et al. 

U.S. Patent No. 5,414,833 to Hershey et al. 

U.S. Patent No. 5,440,723 to Arnold et al. 

U.S. Patent No. 5,623,601 to Vu 

U.S. Patent No. 5,812,763 to Teng 

U.S. Patent No. 5,931,946 to Terada et al. 

U.S. Patent No. 6,070,244 to Orchier et al. 

U.S. Patent No. 6,088,804 to Hill et al. 

U.S. Patent No. 6,185,689 to Todd, Sr. et al. 

U.S. Patent No. 6,275,942 to Bernhard et al. 

U.S. Patent No. 6,282,546 to Gleichauf et al. 

U.S. Patent No. 6,298,445 to Shostack et al. 

U.S. Patent No. 6,301,668 to Gleichauf et al. 

U.S. Patent No. 6,321,338 to Porras et al. 

U.S. Patent No. 6,324,647 to Bowman-Amuah 

U.S. Patent No. 6,347,374 to Drake et al. 

U.S. Patent No. 6,353,385 to Molini et al. 

U.S. Patent No. 6,405,364 to Bowman-Amuah 

U.S. Patent No. 6,415,321 to Gleichauf et al. 

U.S. Patent No. 6,453,345 to Trcka et al. 

U.S. Patent No. 6,460,141 to Olden 

U.S. Patent No. 6,484,203 to Porras et al. 

U.S. Patent No. 6,499,107 to Gleichauf et al. 

U.S. Patent No. 6,546,493 to Magdych et al. 

U.S. Patent No. 6,578,147 to Shanklin et al. 

U.S. Patent No. 6,606,744 to Mikurak 

U.S. Patent No. 6,647,400 to Moran 

U.S. Patent No. 6,681,331 to Munson et al. 
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U.S. Patents 

U.S. Patent No. 6,704,874 to Porras et al. 

U.S. Patent No. 6,708,212 to Porras et al. 

U.S. Patent No. 6,711,615 to Porras et al. 

U.S. Patent No. 6,725,377 to Kouznetsov 

U.S. Patent No. 6,816,973 to Gleichauf et al. 

U.S. Patent No. 6,839,850 to Campbell et al. 



U.S. Patent Application Publications 

U.S. Patent Application Publication No. 2001/0034847 to Gaul, Jr. 

U.S. Patent Application Publication No. 2002/0032717 to Malan et al 

U.S. Patent Application Publication No. 2002/0032793 to Malan et al. 

U.S. Patent Application Publication No. 2002/0035698 to Malan et al. 

U.S. Patent Application Publication No. 2002/0138753 to Munson 

U.S. Patent Application Publication No. 2003/0088791 to Porras et al. 

U.S. Patent Application Publication No. 2003/0212903 to Porras et al. 

U.S. Patent Application Publication No. 2004/0010718 to Porras et al 

The Applicants submit that these search terms cannot be interpreted as providing 
emphasis on these terms when the claims are interpreted and construed by both the Examiner and 
the courts. The Applicants merely selected these terms to identify the prior art that may be more 
relevant than prior art that do not contain these search terms. 

To further assist the Examiner, the Applicants have organized each of the U.S. Patents 
and U.S. Patent Application Publications according to classification. For the non-U.S. patent 
prior art, the Applicants have annotated Form PTO-1449 with the location of each document in a 
respective box. 

The Applicants exerted this additional time and effort to help the Examiner so that if a 
patent is ever issued on this patent application, third parties will understand that the Applicants 
submitted the attached prior art on a good faith basis. The Applicants recognize that the attached 
prior art is voluminous but it is not the Applicants' intent to "bury" any patents that maybe more 
pertinent than other ones. The Applicants do not want to dismiss any reference that he is aware 
of as cumulative in order to prevent third parties from arguing that the Applicants intentionally 
did not submit any prior art in an effort to deceive the Examiner and the Patent Office. 
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This IDS is being filed under 37 C.F.R. § 1.97(b)(4), before the mailing of a first Office 
Action after the filing of a request for continued examination 37 C.F.R. § 1.114, No certification 
is required. No fee is believed to be due. However, should the Commissioner determine 
otherwise, he is authorized to charge such fees to Deposit Account No. 11-0980, 

If the Examiner has any questions concerning this IDS, he is requested to contact the 
undersigned. If it is determined that this IDS has been filed under the wrong rule, the Patent 
Office is requested to consider this IDS under the proper rule (with a petition if necessary) and 
charge the appropriate fee to Deposit Account No. 1 1-0980. 



Enclosures: 

1. Form PTO-1449 

2. Foreign Patents 

3. Publications 

4. Postcard 



Respectfully submitted, 
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6,353,385 


3/5/02 
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340 
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10/4/94 


Bennett et al. 


345 








AD 


6,429,952 


8/6/02 
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5,748,098 
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3/31/98 
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379 
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8/15/00 
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379 
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6,226,372 


5/1/01 
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9/3/02 


Crill et al. 


382 
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Hwang 


455 
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5/11/93 


Husseiny 


702 








AW 


5,842,002 


11/24/98 


Schnurer et al. 


703 








AX 


5,854,916 


12/29/98 


Nachenberg 


703 








AY 


5,999,723 V 


12/7/99 


Nachenberg 


703 








AZ 


6,067,410 


5/23/00 


Nachenberg 


703 
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5,864,803 


1/26/99 


Nussbaum 


704 
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